remove private in auth